Splunk Enterprise

Community Activity

Why am I unable to ingest xml data into Splunk? I am tring to ingest xml file data using below inputs.conf configuration. I am unable to ingest the data. i am not ge... by sagar_shubham23 Explorer in Splunk Enterprise 06-27-2023 0 1	0	1
About Parsing on Splunk- help with props.conf and stransforms.conf? i have ingested logs on univesral forwarder by creating file under/var/log/filename .log & connected to heavy forward... by sudarshan19 New Member in Splunk Enterprise 06-27-2023 0 3	0	3
Why receiving error"This dashboard version is missing. Update the dashboard version in source" after upgrading on prem? We recently upgraded our on prem Splunks to version 9.0.0 and now any time we click on our home grown Dashboards we g... by Gregski11 Contributor in Splunk Enterprise 06-27-2023 0 11	0	11
How do I make a Custom dashboard with js? Hello everyone, I need some help with a spl request. anissabnk_0-1687801121097.png <row><panel><title>SUIVI DES FLU... by anissabnk Path Finder in Splunk Enterprise 06-26-2023 0 1	0	1
Smartstore with S3 - how to authenticate AWS EKS v1.24+ with Splunk 9.0.* and Smartstore ? Hi,we have been running indexer pods with Smartstore on S3 for a while without problems. When upgrading to AWS EKS v1... by aroth New Member in Splunk Enterprise 06-26-2023 0 0	0	0
Tabs in Dashboard Studio- Is there a way to implement multiple tabs/pages for a single dashboard? Is there a way to implement multiple tabs/pages for a single dashboard? I have previously asked how to do this and I ... by sizemorejm Explorer in Splunk Enterprise 06-23-2023 0 0	0	0
Will my ITSI setting work- itsi_notable_event_retention.conf? does setting the following configuration in itsi_notable_event_retention.conf will send the events if limit is reache... by abhisplunk1 Explorer in Splunk Enterprise 06-23-2023 0 0	0	0
Oracle Linux 7 Glibc issue and solution Upgrading glibc package version 2.17-326.0.5.el7_9 on Oracle Linux 7 can cause crashes.Please see https://github.com... by dwest_splunk Splunk Employee in Splunk Enterprise 06-22-2023 1 0	1	0
SavedSearch API - Update my splunk report I need an API call to run a Splunk report that has already been saved and add the most recent values to the report.I... by analysthok Loves-to-Learn Lots in Splunk Enterprise 06-22-2023 0 0	0	0
How to create a search to join two query's for common values to populate results in table? "my base query 1 to Total _count_of_sucess_transactions" \| rex "URI\s*(?<URI>[^\=\n]+)""my base query 2 to track... by kc_prane Communicator in Splunk Enterprise 06-22-2023 0 3	0	3
Is it possible to have alerts and reports assigned to nobody as owner? would there ever be a scenario where its acceptable to have enabled alerts and or reports running which are not assig... by Gregski11 Contributor in Splunk Enterprise 06-22-2023 0 4	0	4
Eventgen: How to create a frequency based on timestamp? Hello ! I would like to generate a drop down of data during a specfic hour. Let's say 2pm here is my eventgen.conf :... by AlizéGui Explorer in Splunk Enterprise 06-22-2023 0 0	0	0
Is there a version that doesn't have high CPU usage like in 9.0.2? Hi Community, I have upgraded the Splunk cluster to version 9.0.2 and noticed high CPU usage in the cluster search ... by _pravin Contributor in Splunk Enterprise 06-21-2023 0 4	0	4
How can we implement read only columns in the Splunk App for Lookup File Editing? We are using Splunk Enterprise 9.0.1 OnPrem, with Splunk App for Lookup File Editing version 3.6.0.We need to get a u... by joshiro Communicator in Splunk Enterprise 06-21-2023 0 3	0	3
How to exclude field during ingestion through DB Connect? Hey everyone, I have a couple databases that are being ingested through DB Connect that have an excessive amount of f... by Angelt_3114 Engager in Splunk Enterprise 06-21-2023 0 2	0	2
Upgrade Splunk Universal Forwarder from Deployment Server Hello, is there a way to upgrade Splunk universal forwarder to all onboarded endpoints using the deployment server? I... by daniaabujuma Explorer in Splunk Enterprise 06-21-2023 0 1	0	1
Going to Splunk 9 : Does CPU and RAM usage increase after migration? I splunkers, I'm currently planning to upgrade to Splunk 9. Does someone of you had noticed CPU and RAM usage incre... by o_calmels Communicator in Splunk Enterprise 06-20-2023 0 0	0	0
Lookup Editor 4.0.1 - New UI changes difficult to use? Hi good people, Is it just me or has the new Lookup Editor 4.0.1 UI become super annoying to use.First the centering ... by auradk Path Finder in Splunk Enterprise 06-20-2023 0 2	0	2
Do I need to clear out some config file to get the lookup table working again? I have a lookup table file that changes periodically. Replacing the lookup table this time around resulted in multipl... by splunkke New Member in Splunk Enterprise 06-19-2023 0 0	0	0
Splunk Stopped sending email for Alerts and reports? Splunk stopped sending email for Alerts, reports and Dashboards. Checked from IT team regarding SMTP settings under s... by CHAUHAN812 Explorer in Splunk Enterprise 06-17-2023 0 4	0	4
Are Alerts and Reports Global or specific to that Search Head? For example if there are two Search Heads and I go to Settings \ Searches, reports, and alerts on Search Head 1and I ... by Gregski11 Contributor in Splunk Enterprise 06-16-2023 0 1	0	1
How to print timeline/notes in Splunk ES's investigations? When you print the summary of an investigation through ES it does not include notes. Is there a way to add those? Alt... by PwC-Kimmy Explorer in Splunk Enterprise 06-16-2023 0 0	0	0
Unsecure Splunk Browser Hi Splunkers,I am new to handling certificates but it seems to be the resolution that I need to resolve the unsecure ... by arielpconsolaci Path Finder in Splunk Enterprise 06-16-2023 0 1	0	1
Can someone help with error received while configuring Splunk DBconnect? Can someone help me please with the configuration of Splunk DB connection I receive failed to restart task server . by jetmirhoxha29 New Member in Splunk Enterprise 06-15-2023 0 0	0	0
Splunk forwarder in regulated environment Dear Splunk Experts, We plan using your product in a regulated environment, having a question on the (heavy) forwarde... by FGo Engager in Splunk Enterprise 06-14-2023 0 2	0	2